Identify Mini smart switch WiFi Relay Module with ln882hki Chip

Question

I got a relay on an unknown chip, maybe someone knows what kind of chip it is?

divadiow · Accepted Answer

I also have this Cozylife 16A mini switch with LN-02 - I've captured the boot log and it has the same product ID, but a newer firmware. Code: text Expand Select all Copy to clipboard[14:09:36.925] - serial type is general [14:09:36.965] - Open COM10 Success [14:09:41.512] - ------  wifi_mcu_basic_example  ------ [14:09:42.053] - TCP/IP initialized. [14:09:42.058] - LN882H SDK Ver: 2.1_rc1  [0x02010001] [14:09:42.059] -     ____               _     _  __ [14:09:42.060] -    / ___|___ _____   _| |   (_)/ _| ___ [14:09:42.066] -   | |   / _ \_  / | | | |   | | |_ / _ \ [14:09:42.068] -   | |__| (_) / /| |_| | |___| |  _|  __/ [14:09:42.069] -    \____\___/___|\__, |_____|_|_|  \___| [14:09:42.070] -                  |___/ [14:09:42.071] - cozylife_app_info [14:09:42.072] - CozyLife SDK Version: 0.6.0 [14:09:42.073] - CozyLife SDK Build Nov 28 2023 09:34:21 [14:09:42.074] - cozylife_app_info [14:09:42.074] - Product Id: iy9fT1 [14:09:42.075] - Firmware Version: 1.0.2 [14:09:42.080] - Firmware Build Nov 28 2023 09:34:28 [14:09:42.081] - device id: [14:09:42.083] - [0;35m1609473600 [L] [     lib_log] udplog_init on: 0, 192.168.2.2:7789 [14:09:42.085] - [0m[0;35m1609473600 [L] [     lib_ble] ble mac: e8:73:f0:c2:50:00 [14:09:42.827] - [0m BLIB Ver: 1.0.5  [0x010005ff] [14:09:42.829] - [0;35m1609473600 [L] [     lib_ble] bt_event_bleenabled [14:09:42.834] - [0m[WLIB_I]cap_comp = 0, xtal_capbank_tab:[0]:40 [1]:35 [2]:35 [3]:35 [4]:50 [5]:70 [6]:70 [7]:70 [14:09:42.837] - [WLIB_I][original]phy_tab_1f:0x4C, phy_tab_20:0x3C [14:09:42.839] - [WLIB_I][efuse]phy_tab_1f:0x50, phy_tab_20:0x40 [14:09:42.841] - [WLIB_I][flash]phy_tab_1f:0x50, phy_tab_20:0x40, tx_pwr_comp_all=0, tx_pwr_comp_b=0, tx_pwr_comp_gn=0 [14:09:42.844] - [WLIB_I]==>temp_sect:2,phy_tab_1f:0x50,phy_tab_20:0x40 [14:09:42.846] - [WLIB_I]temp_sect:3,phy_tab_1f:0x50,phy_tab_20:0x40 [14:09:55.058] - [WLIB_I]temp_sect:2,phy_tab_1f:0x50,phy_tab_20:0x40 [14:09:56.063] - [WLIB_I]

p.kaczmarek2 · Answer

This search may be related: Where did you order this device?

Lesnoi · Answer

I got them on AliExpress. as I understand it, their firmware is impossible?

p.kaczmarek2 · Answer

Maybe it's possible, there is some SDK:
https://github.com/lightningsemi/ln882h
Can you check whether the flash tool is also present there? Is the flash tool able to read and write the device flash via UART?

Another problem would be that I dont have this kind of chip at hand.

Lesnoi · Answer

Can I somehow help with development?

p.kaczmarek2 · Answer

Hello, are you referring to OBK development in general or to LN882H?

You can try to test the LN882H flash tool, you can try porting OBK to this platform (I can tell you how, if you're interested), you can also make a donation: https://paypal.me/openshwprojects

protectivedad · Answer

I hooked up the uart and it keeps repeating: Code: text Expand Select all Copy to clipboard------  wifi_mcu_basic_example  ------ While I was connecting the 3.3v lead it started up the CozyLife code: Code: text Expand Select all Copy to clipboardTCP/IP initialized. LN882H SDK Ver: 1.8  [0x010800ff]     ____               _     _  __    / ___|___ _____   _| |   (_)/ _| ___   | |   / _ \_  / | | | |   | | |_ / _ \   | |__| (_) / /| |_| | |___| |  _|  __/    \____\___/___|\__, |_____|_|_|  \___|                  |___/ cozylife_app_info CozyLife SDK Version: 0.6.0 CozyLife SDK Build Sep  9 2023 08:53:37 cozylife_app_info Product Id: iy9fT1 Firmware Version: 1.0.1 Firmware Build Sep  9 2023 08:53:44 device id:DELETED 1609473600 [L] [     lib_log] udplog_init on: 0, 192.168.2.2:7789 1609473600 [L] [    lib_wifi] wifi_start_connect [WLIB_I]cap_comp = 0, xtal_capbank_tab:[0]:40 [1]:35 [2]:35 [3]:35 [4]:50 [5]:70 [6]:70 [7]:70 [WLIB_I][original]phy_tab_1f:0x4C, phy_tab_20:0x3C [WLIB_I][efuse]phy_tab_1f:0x54, phy_tab_20:0x44 [WLIB_I][flash]phy_tab_1f:0x54, phy_tab_20:0x44, tx_pwr_comp_all=0, tx_pwr_comp_b=0, tx_pwr_comp_gn=0 [WLIB_I]==>temp_sect:2,phy_tab_1f:0x54,phy_tab_20:0x44 [WLIB_I]

Hgo11 · Answer

Hello, Does anyone have the pin mapping for this switch? Flashed openbeken and forgot to backup old one. Thanks!

p.kaczmarek2 · Answer

I think it's already on our list: Here:

Hgo11 · Answer

thanks for the swift answer, didn't notice it.

p.kaczmarek2 · Answer

It has been brought to my attention that MQTT Discovery fails on LN882H. I've submited a fix:
https://github.com/openshwprojects/OpenLN882H/commit/29073151d1bc6dada9bb28f818928bba8e06617e
As usual, we had to increase MQTT buffers, namely:
- MQTT_OUTPUT_RINGBUF_SIZE
- MQTT_VAR_HEADER_BUFFER_LEN
- MQTT_REQ_MAX_IN_FLIGHT
Still, I haven\t been able to test it myself yet, so let me know if it works for you guys.

silvestro_gatto · Answer

>>20911009I have some of this Cozylife 16A mini switch with LN-02 and I was able to save original firmware and upload OpenLN882H firmware LN882H_Test_ver_1.17.478.I couldn't get any serial output with the original firmware. Could you please tell me which speed you set on the serial port to capture the boot log? Thanks!Added after 12 [minutes]:>>20943170One more question ... Could you please explain how to modify the upper part of the Template info ( vendor , bDetailed, name, model, chip, board, flags, keywords)? I tried many times to Import the Elivco Cozylife 16A Mini Switch (RMW002) Template and apply it, but I can only update the pin settings. I am also getting a FAILED! Invalid command lfs_format // clear LFS error when I click on Clear OBK and apply new script from above button Thank you!

divadiow · Answer

I think maybe just 115200. Obviously the BOOT pin is not grounded for standard flash boot output. The output logs posted are from factory fw, so you can expect an already-flashed OBK output to be different. The import function strips this info out anyway and will only apply the pins and flags settings. The export box text is for copying out into a text editor for manual editing and then posting on these forums. If the template posted is unique it'll normally end up being added to the devices list - yes. the import/littlefs stuff doesn't seem to be setup for LN882 firmware yet. Manual module config required

silvestro_gatto · Answer

Hi divadiow,Thank you for your prompt answer.In my past test I tried to log from serial port the factory fw, but (even changing the serial port speed and leaving BOOT disconnected from Ground) I did not get any output in the serial monitor. Just curious what version of factory fw is running on my devices ...Btw, is there a way to modify the values of vendor, bDetailed, name, model, chip, board, flags, keywords in the currently running Template and make them consistent with the current hw? Is there any configuration file where these information are stored that can be edited and updated?Thanks!

p.kaczmarek2 · Answer

All those fields (except flags) are for template only, they are not stored on the device. The idea is that you are supposed to fill them while creating a teardown topic on our forum, and then paste the template in the topic, so we can later add it to

silvestro_gatto · Answer

Got it! Many thanks p.kaczmarek2

silvestro_gatto · Answer

Instead of the text LN882H_Test, it would be nice to show the current version (i.e. OpenLN882H_1.17.501) both in the footer of each page and in the Config Tab of the Web Application I have several devices running different versions of OpenLN code and Build info is not enough to quickly find the correct version.

p.kaczmarek2 · Answer

It seems we need to define USER_SW_VER in Makefile, I will check this out. If that's not defined, then a default value is used:

silvestro_gatto · Answer

Hello @p.kaczmarek2,I updated the firmware on some LN882H modules and noticed that they are still showing version LN882H_Test instead of the current firmware version.Is there any timeframe for fixing this issue?Thank you!

p.kaczmarek2 · Answer

Not yet, we need somebody who knows CMake to look into forwarding the CMake variable to a #define , I have looked into that some time ago but I don't know CMake and I didn't have much time to research that. Here is unfinished PR:
https://github.com/openshwprojects/OpenBK7231T_App/pull/1123

silvestro_gatto · Answer

Thank you for your follow up.

divadiow · Answer

maybe there should be an Elektroda Discord to attract more devs, real-time chat etc

silvestro_gatto · Answer

>>21012498

@p.kaczmarek2 I'm glad that fixing the problem with LN882H time_t size brought some resources to the solution of this issue too. Showing also release info makes more sense than just build date & time and it is consistent with all the other platforms.

terryb8s · Answer

>>21012958 1 to Discord, I would be keen on this and happy to help as needed with support for stuff I know about, would be nice to have a bit of community for more collaborative conversations etc.

Obviously understand there may be some reluctance to using Discord as the forum allows for a better recording of the history on a specific topic.

alexios_13 · Answer

Anybody knows how these switches communicate from the app.
I am interested in triggering them without the app but without flashing them.
I did manage to get a lot of info about the device by using a MITM proxy and starting the Cozy Life app, but when I trigger the switch nothing happens so I suspect that it uses some kind of other protocol than http to trigger the switch over WIFI.
Thanks !

darknesspaladin · Answer

>>21243429
Hello, alexios_13!
Here's what I know so far:
1. The device initiates a TCP connection to 139.162.135.94:8899 (apparently for remote control "via the cloud"). The protocol is NOT HTTP/HTTPS, when trying to connect via telnet there is no prompt, banner or server greeting, and there are no error messages when trying to send anything there.
2. The device accepts incoming connections on TCP/5555. The protocol is unknown, when connecting via telnet there is no greeting or response to the data sent.

I'll probably do more research, but don't count on me - I only have one of these devices, which I bought inexpensively by mistake, and I have no benefit from researching it unless I can get results quickly.

I think you can try using Mitmproxy in "Generic TCP" mode -- I saw in its documentation that it can do this.

p.kaczmarek2 · Answer

Do you have any captures of their communications, like Wireshark one or something?

vit5041 · Answer

Hello All!
I've got this mini switch with LN882H chip. Tried to flash it with esphome firmware -- it simply doesn't work. Used bk72xx: board: generic-bk7231n-qfn32-tuya then found some OpenLN882H firmware and it's started. Then I am lost and cannot figure out, can I use this board in ESPHOME ? Which board definition in esphome can I use? Thanks a lot for your help.

Upd. It seems it is not supported in ESPHOME.

p.kaczmarek2 · Answer

Esphome does not support many devices, you should rather try:

Option	Works for LN882H thread cases	Main use	Limitation shown in thread
OpenLN882H official flasher	Yes	Flashing `OpenLN882H_1.18.175`	Must back up first
ltchiptool flasher	No, file reported unrecognized	General flashing attempt	Rejected LN882H firmware file
ESPHome with `bk72xx` generic board	No	Tried as alternative firmware	User reported it simply did not work
OpenBeken/OpenLN882H web template import	Partial	Apply pins/flags	Does not store template metadata on device

Identify Mini smart switch WiFi Relay Module with ln882hki Chip

What chip is inside this unknown Wi‑Fi relay module?

Topic summary

FAQ

Quick Facts

How can I identify whether my mini smart switch uses the LN882H or LN882HKI chip before flashing it?

What flashing tool should I use for an LN882H smart switch if ltchiptool says the firmware file is unrecognized?

How do I back up the original firmware from a CozyLife LN882H mini switch before installing OpenLN882H or OpenBeken?

Why does an LN882H relay sometimes only show repeated "wifi_mcu_basic_example" on UART instead of the full CozyLife boot log?

Which UART baud rate and BOOT pin state should I use to capture the factory boot log from a CozyLife LN882H switch?

Where can I find the pin mapping or device template for the Elivco CozyLife 16A Mini Switch RMW002 with LN882H?

How do I apply an OpenBeken template on LN882H when the import only updates pin settings and not fields like vendor, model, or name?

Why does OpenLN882H show "LN882H_Test" instead of the real firmware version in the web interface, and how is USER_SW_VER involved?

What is MQTT Discovery in OpenBeken/OpenLN882H, and why can it fail on LN882H builds?

What does SoftAP mode mean on an LN882H smart switch, and how is it used during Wi-Fi provisioning?

ESPHome vs OpenLN882H/OpenBeken for LN882H switches — which platform is actually supported and practical to use?

How can I help with LN882H or OpenBeken development if I own one of these AliExpress relay modules?

What protocol does the CozyLife app use to control LN882H switches over Wi-Fi if MITM proxy traffic does not show HTTP commands?

Why does the LN882H device open TCP connections to 139.162.135.94:8899 and listen on TCP port 5555, and how could I inspect that traffic?

What causes the "FAILED! Invalid command 'lfs_format // clear LFS'" error on LN882 firmware, and what manual configuration steps should I use instead?